Disclosed is a method for monitoring static objects in a mixed environment. The method comprises the following monitoring procedures: monitoring whether static objects are tampered with, wherein whether the static objects are tampered with is sequentially monitored, recording the number of times the static objects are tampered with, and determining whether the number of times the static objects are tampered with reaches a pre-set number of times t; if so, further monitoring whether middleware is tampered with; and when the middleware is determined to be tampered with, monitoring whether an operating system is tampered with. In the tampering monitoring process for static objects, not only can whether the static objects are tampered with be rapidly monitored, the reason for the static objects being tampered with can also be further mined, and each monitoring step can be operated in parallel or in series, so that the deployment is flexible and the operation is efficient.